This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer File: yOx8SlcVXOjexbHNYv-oQBexb1g.cer (raw, json) Hash identifier: yvkN9xQKts7ZooT4r17/jR2r6rzoVeFW342vw+J1t/g= Subject key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83DE9131BDD0E0D7BF613FBA6B4ABF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 92.42.99.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:de:91:31:bd:d0:e0:d7:bf:61:3f:ba:6b:4a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:71:18:7f:ac:31:63:df:20:d7:34:dd:da: 5d:55:fc:ab:f3:32:80:9d:38:65:58:80:21:cf:07: 67:d1:28:04:63:78:b3:31:1b:b9:3a:05:34:e6:b2: 1e:fe:35:4d:36:e7:99:85:f0:31:94:52:4f:54:9d: f5:53:c5:1d:53:a5:72:2b:fb:fb:a7:48:d3:dc:44: ce:12:be:30:9a:d8:c9:3d:f5:a3:f1:16:89:fc:16: 6b:c1:c7:88:50:99:e4:5e:85:9d:2b:32:44:92:0a: 54:e6:24:1d:68:d6:99:1d:9d:b7:9c:5f:9c:7f:44: 4d:d4:6c:e0:3e:ec:7b:be:b6:69:3f:ad:60:93:f6: a7:a4:9f:20:9e:c8:03:c0:41:fb:77:80:0c:5e:6e: b5:20:eb:b2:e0:83:5e:3d:ac:7c:f4:81:04:fa:31: 19:00:d6:8e:8c:8b:28:e8:1b:42:57:78:93:86:39: ed:12:f5:29:bb:24:1b:de:56:a1:61:4e:01:64:71: 4a:08:7f:1f:27:47:84:0c:e1:c0:4b:52:c8:de:2c: 59:69:3d:25:6d:70:d1:a7:12:db:a9:9f:30:97:8a: e9:8d:61:1f:77:97:a6:44:1c:04:42:b2:ac:51:13: ad:b9:59:27:52:e8:5d:bf:b8:bf:9e:1b:e9:9d:35: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.99.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:94:8b:0d:16:8e:8f:88:1b:12:d1:c1:80:b2:94:cc:a5:f4: a8:90:b9:47:86:ea:5e:79:7d:f5:06:66:83:3d:1a:c4:fe:9a: ee:bb:0c:34:54:9b:50:1a:07:af:10:27:01:cb:36:01:03:70: 54:1d:58:0a:33:ae:a5:10:ad:ad:04:76:d5:56:72:d3:24:7d: cd:3d:27:ee:18:ba:36:51:4a:5b:3a:e0:bd:f7:24:4e:e9:2d: 94:c6:6e:75:66:55:76:08:ed:03:04:f9:25:cc:ac:d8:2b:5f: ae:6a:16:54:dd:7e:f7:1c:15:53:0c:03:c0:b4:ba:cf:c6:5d: 79:02:81:30:4c:09:1b:9b:22:fa:43:11:50:3b:ad:f1:84:ea: 64:71:9b:66:86:24:54:90:ef:f1:fd:da:19:24:81:11:50:00: 00:f6:49:38:10:d9:bc:de:fa:80:37:7b:06:38:d1:e4:7a:77: 78:d1:15:69:c2:44:99:7d:cc:4d:a5:51:c9:ad:a1:e6:2d:a2: 66:0c:ec:0d:17:a1:4a:3f:14:56:d2:13:1e:f4:5f:b9:07:48: bd:49:a9:c0:0b:22:09:40:b5:10:04:94:4a:61:b8:98:81:7d: b8:dd:f3:e1:9b:53:2c:5b:07:3f:c7:cf:8a:22:99:86:c6:8b: 2e:e0:54:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/g96RMb3Q4Ne/YT+6a0q/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVjN2M0YTU3MTU1Y2U4ZGVjNWIxY2Q2MmZmYTg0MDE3YjE2ZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMlxGH+sMWPfINc03dpdVfyr8zKA nThlWIAhzwdn0SgEY3izMRu5OgU05rIe/jVNNueZhfAxlFJPVJ31U8UdU6VyK/v7 p0jT3ETOEr4wmtjJPfWj8RaJ/BZrwceIUJnkXoWdKzJEkgpU5iQdaNaZHZ23nF+c f0RN1GzgPux7vrZpP61gk/anpJ8gnsgDwEH7d4AMXm61IOuy4INePax89IEE+jEZ ANaOjIso6BtCV3iThjntEvUpuyQb3lahYU4BZHFKCH8fJ0eEDOHAS1LI3ixZaT0l bXDRpxLbqZ8wl4rpjWEfd5emRBwEQrKsUROtuVknUuhdv7i/nhvpnTXjZQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMjsfEpXFVzo3sWxzWL/qEAXsW9YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzJkOTVl Ny1iYTE3LTQ3N2YtODliNy1kYTVmNmE2NThmOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMmQ5NWU3 LWJhMTctNDc3Zi04OWI3LWRhNWY2YTY1OGY4Yi8xL3lPeDhTbGNWWE9qZXhiSE5Z di1vUUJleGIxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXCpjMA0GCSqGSIb3DQEBCwUAA4IBAQBNlIsN Fo6PiBsS0cGAspTMpfSokLlHhupeeX31BmaDPRrE/pruuww0VJtQGgevECcByzYB A3BUHVgKM66lEK2tBHbVVnLTJH3NPSfuGLo2UUpbOuC99yRO6S2Uxm51ZlV2CO0D BPklzKzYK1+uahZU3X73HBVTDAPAtLrPxl15AoEwTAkbmyL6QxFQO63xhOpkcZtm hiRUkO/x/doZJIERUAAA9kk4ENm83vqAN3sGONHkend40RVpwkSZfcxNpVHJraHm LaJmDOwNF6FKPxRW0hMe9F+5B0i9SanACyIJQLUQBJRKYbiYgX243fPhm1MsWwc/ x8+KIpmGxosu4FR2 -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:58 2026 by rpki-client